Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File:                     ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier:          zrF90cQQBPTVrLhwT8z38zHIr6G4cMXJfWEf5crqe2Y=
Subject key identifier:   59:E0:B9:24:DB:BC:2D:03:B6:4C:96:AC:35:B4:FA:0F:4B:D1:84:8C
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer:       /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial:       0190452FBA67D9B3A7348A3CDAA2258AB227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number:          08C1
Signing time:             Sun 23 Jun 2024 13:01:13 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:13 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:13 +0000
Files and hashes:         1: Hs8ZeDvQ4JDT_G1y4im9B17Y1dQ.roa (hash: Xsaz2s1ck+eCxBftiChB3zU7TEsM+LP6oiX6P/9gdag=)
                          2: yMbBlyLCpdMZ5wKK31NOiDm7MHc.roa (hash: WCKzhFKQuV/7ALjaZZrcmlX9kz4INZCcf0KaL1h/FFQ=)
                          3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: Atoe8K1YTFqjO4tirDaVVF81sAN69FyS0LXrWCdX3U0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:ba:67:d9:b3:a7:34:8a:3c:da:a2:25:8a:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
        Validity
            Not Before: Jun 23 13:01:13 2024 GMT
            Not After : Jun 24 13:01:13 2024 GMT
        Subject: CN=59e0b924dbbc2d03b64c96ac35b4fa0f4bd1848c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:95:51:9a:19:32:56:c2:25:94:b5:6f:80:
                    d9:94:52:7f:8a:6e:6c:48:37:f2:14:82:c5:cb:f6:
                    a9:80:0d:20:72:22:11:48:59:85:ea:96:f2:e9:32:
                    65:08:ac:97:12:d3:f1:8f:a8:69:61:9a:03:12:f7:
                    07:16:59:b3:51:4b:93:fa:26:be:0c:b5:03:73:5a:
                    07:e1:f0:a0:c8:85:3c:1c:35:be:c5:8c:69:45:4a:
                    fe:4c:97:e2:f1:b4:24:1f:fc:47:db:00:84:b8:12:
                    b2:39:0e:46:cc:d1:d9:9a:46:50:e2:9a:d8:fd:5b:
                    20:ee:71:e9:cd:ff:38:43:f1:47:80:31:44:86:00:
                    4f:f8:99:74:64:d9:e7:1f:a0:b0:cd:43:6f:a1:e4:
                    3f:b1:b9:06:b8:35:ff:79:5f:87:19:37:ae:1b:3b:
                    31:dd:d0:79:a1:ef:04:5b:81:eb:b0:df:0f:60:17:
                    56:5b:5a:e2:8e:23:40:91:89:ca:56:aa:9a:59:3b:
                    d0:f6:15:22:4e:f3:ec:2d:26:69:af:49:f6:5a:42:
                    20:ac:0e:2b:30:fe:81:b0:02:97:1d:d8:b2:6f:9f:
                    d7:d3:4f:01:49:47:7c:05:6f:44:a4:af:6c:eb:d1:
                    19:3e:54:2a:a7:0c:50:46:f0:a5:1f:7d:47:2d:f1:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E0:B9:24:DB:BC:2D:03:B6:4C:96:AC:35:B4:FA:0F:4B:D1:84:8C
            X509v3 Authority Key Identifier:
                keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:98:21:23:48:dd:cf:17:57:7c:9d:36:26:45:ff:31:5c:b0:
         de:29:73:15:0f:7e:3b:4e:73:7a:5c:de:de:8d:53:ff:44:58:
         fb:30:0a:5e:bf:37:43:a6:c5:de:3c:7b:60:18:80:69:60:24:
         ae:f0:88:1c:c5:dc:1f:cd:5d:3b:c8:95:9b:0f:28:13:b6:ff:
         2a:cf:c6:32:a3:60:19:54:19:86:37:91:09:89:4a:a3:5d:a6:
         9d:94:e4:36:2d:24:73:27:00:7c:20:05:49:75:2c:ff:32:58:
         c5:66:5f:f0:ae:14:46:0e:ab:46:f3:a3:71:5c:a8:d3:f3:70:
         83:76:02:8e:0e:bf:c4:68:b6:b0:91:72:33:8e:28:b6:ab:d3:
         c4:38:00:fe:b4:bc:1f:67:50:f2:aa:0e:5e:84:73:30:7b:8b:
         b8:ef:9a:9e:77:2c:29:36:9a:53:1b:bd:36:e2:49:1b:92:b4:
         eb:5e:d5:26:fa:e1:74:57:ef:6e:e3:ce:4b:b7:5c:c7:c0:6b:
         f1:4f:d0:52:e4:ea:e2:52:96:97:ac:bc:23:32:a2:9f:6e:95:
         de:8a:67:99:d3:55:e8:30:22:22:77:e3:88:c7:fd:44:f1:a9:
         e5:a6:a4:fa:15:8d:71:b8:99:e0:5b:ad:67:5b:39:5e:b5:c1:
         a2:f8:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:48:58 2024 by rpki-client on console-ams.rpki-client.org